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ABSTRACT 

PURPOSE: To provide an evaluation method for strength of cipher algorithm 
and a strength evaluation device which are adaptable to an involution type 



* cipher such as FEAL and the like which have more search calculation 
^quantity than DES in a practical time. 

CONSTITUTION: This device has an initial value setting means 110 setting an 
initial value when the maximum deviation rate of (n) stages linear 
expression of a cipher algorithm is searched, a search candidate extracting 
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condition, a best expression search means 13 0 searching n stages linear 
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= K t [rK x .] with probability 
i ) t4«T0>^ (4) 7»^e,*is. * 
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gi^-tS. involutionSRif-J§-<Z>#Ii:bT\ DES (f&ffl 
it, "Data Encryption Standard," Federal Informatio 
n Processing Standards Publication 46, National Bu 
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then try another candidate for r I j . 
t Call Procedure Round-(i+l). 
Return to the upper procedure. 
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&mrt*-yfflm%gim 1 2 1 & 

^Pattern j [p* u , p' 12 , p' iD ] fe^je-t 
5. P* jj (l^j^n) <Z)iiy^5«tt;' f&^TJV3 
U f B33R©fi|fi!lJC«[#b, f m.fcflMfr*-S Wr 

^5, rDEsi«#<D!i«^i»^ (i) j . m^nmm* 

*=LV<r-< i/V^fASC I S93-X, (Jan,1993))tC 
— iB E S T n Sp' u ^l/2 
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IT • 1 : -^©BUBfc 
l^i^n. i + r-l£nfc§!fc-f£"C0)i, 

Cq' i . q' l+i » q* i+r-i 3 ^BEST 

, J .10 
Sifet^&fiyi'tS. W&£&V>*|!Sltrt*-:/U: 
«IU ^f»/^2 0 1C#l?t5. 

[0 0 5 23 *7^:72 04) IRftlttWttRSSBi 

xm**-v (p' i . p* 2 » p' . ) ®»hk 
Mfttfuatc (p* i , p' 2 , -p' „ ) tsu* 

(DProcedure Search (n, Pattern x ) 
A* 

Pattern. nl : &&A9-r-y (p' 1X , ] 

BEST, : n MBipmi 
©Procedure Round-l: 

For each candidate for r0 1 and P I j 
t Let P* j =p* x (rOi , r I x ) . 
t If P' i *p' [ji then try another candidate for 

rOj and T 1 1 . 
t Call Procedure Rqund-2. 
BEST, =-,BEST, . 
Print BEST,.. 1 
Exit the pro gran. 
Procedure Round-2: 
For each candidate for T0 2 
t Let p' 2 -p* (T0 2 , 
t If p' 2 *P* 12. 



) (q' 



C (q' j , q' 2 . q' i 
„_i , q' i ) J 
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and r 1 2 » do the following: 



r r 2 ) . 

then try another candidate 
for T0 2 and T I 2 . 

t Call Procedure Round-3. 
Return to the upper procedure. 
Procedure Round-r (3gr^n) 
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t Let ro r «ro p . 2 §n M . 
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t If r n Call Procedure Round-(r+l) , else print 
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YES 



(1 6) 



4$lfg¥8 -1 90 344 




(17) 4$W¥8 

mi o] 



n =»4 : 4»fta38flGS-C#X.2 

P 

I 




(8) ii£3fcArfiiiifaciw53$nrc^^-v 



